Previously, risk management was handled by a corporate function, mostly dealing with insurance companies (and later also security) . In the last few years the organization for supply chain risk management has been developed and many people and functions are involved. On a high level, the corporate function for risk management, the SCM/logistics function (in Ericsson called the core unit supply) and the purchasing function (core unit sourcing) are involved, as well as (Figure 4) the units responsible for the different business areas (SBAs) . They are working together in a matrix-oriented way, for example with a risk management council with representatives from the different units. The roles of the main functions involved are